Privacy Policy ulartoti —
Member Personal Data Protection

In operating the ulartoti online betting and gaming platform, we collect several categories of information from our members. This collection is conducted transparently and solely for legitimate purposes related to providing our services to you.

We may also collect information indirectly when you interact with our platform through cookies and similar tracking technologies. Further details about cookies are explained in Section 6 of this document.

The personal data we collect is used solely for legitimate purposes directly related to the operation of the ulartoti platform. We do not use your data for any unrelated purpose without your prior consent.

• Account management: Registering, verifying, and managing your member account, including KYC processes mandated by regulations.
• Transaction processing: Processing all deposits and withdrawals securely, and maintaining financial records required for audit and compliance purposes.
• Platform security: Detecting and preventing fraud, multi-account usage, money laundering, and any suspicious activity that could compromise the safety of other members.
• Service provision: Ensuring a smooth, personalised gaming experience based on your preferences and gaming history on the platform.
• Service communications: Sending important account-related notifications, selected promotions, system updates, and information relevant to your activity.
• Legal compliance: Fulfilling legal obligations under the PDPA 2010, anti-money laundering regulations, and applicable regulatory requirements.
• Product improvement: Analysing usage patterns on an aggregate basis (not individual data) to improve platform features and the overall user experience.

Whenever we intend to use your data for a new purpose beyond what is stated above, we will obtain your explicit consent first or notify you via in-platform notification.

Ulartoti takes a highly cautious approach when it comes to sharing member personal data. As a general rule, we do not share, sell, or transfer your information to external parties except in the circumstances set out below.

• Third-party service providers: We work with selected companies that help us run our operations, such as payment processors, cloud service providers, and identity verification firms. All these third parties are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.
• Legal requirements: We may be required to disclose certain information to law enforcement, government agencies, or regulatory bodies when mandated by law or a valid court order.
• Fraud prevention: In specific cases involving financial fraud or cybercrime, we may share relevant information with financial institutions or law enforcement agencies to protect our members' interests.
• Business transfer: In the event of a merger, acquisition, or sale of company assets, member data may be transferred to the new entity, subject to the same or stricter privacy policy.

The security of your personal data is ulartoti's top priority. We continuously invest in the latest security infrastructure to ensure your data is protected at every stage — during transmission, during processing, and during storage.

• Data encryption in transit: All data transmitted between your device and our servers is encrypted using TLS 1.3 protocol with a 256-bit SSL certificate. This means no third party can intercept or read your data in transit.
• Data encryption at rest: Sensitive data stored in our databases, including financial and identity information, is encrypted using the industry-recognized AES-256 standard.
• Multi-layer access controls: Access to member data within our internal systems is restricted on a least-privilege basis — each staff member can only access the data required for their specific role.
• Continuous monitoring: Our systems are monitored 24 hours a day, 7 days a week to detect any unauthorized access attempts, traffic anomalies, or other security threats.
• Retention period: Personal data is retained for as long as your account is active or as long as necessary to provide services to you. Terminated account data is retained for a minimum of 7 years to meet legal compliance requirements before being securely deleted.

Under Malaysia's Personal Data Protection Act 2010, you have certain rights regarding the personal data we hold. ulartoti fully respects these rights and provides accessible channels for you to exercise them.

The ulartoti platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse how our platform is used. Cookies are small text files stored on your device when you visit our website or use our app.

Below are the types of cookies we use and their purposes:

The ulartoti platform is exclusively for individuals aged 18 and above. We do not intentionally collect, store, or process the personal data of children under the age of 18. This is our absolute, non-negotiable policy.

• All new account registrations go through a strict age verification process via KYC checks.
• If we find that personal data belonging to underage minors has been collected inadvertently, we will promptly delete that data and close the associated account.
• Parents or guardians who discover their child has registered an account on our platform are requested to contact our support team immediately.

Ulartoti reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the way we deliver our services. We are committed to informing you of any material changes.

• The latest version of the Privacy Policy will always be available on this page with a clear effective date.
• For material changes, we will send a notification to all active members via their registered email or in-platform notification at least 14 days before the changes take effect.
• Your continued use of the platform after the effective date of any changes constitutes your acceptance of the updated version of the privacy policy.
• If you disagree with any changes made, you have the right to close your account and request deletion of your personal data before the changes take effect.

We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns, or wish to exercise your rights regarding personal data, the ulartoti data protection team is always ready to assist you. We take every privacy inquiry seriously and strive to provide a thorough and timely response.

• Response time: We aim to respond to all privacy-related enquiries within 3 business days and process formal requests within 14 business days.
• Language: We accept enquiries in Bahasa Malaysia and English.
• Communication channels: Contact our support team directly through the platform for privacy enquiries. Our support email is listed at the bottom of this page.